Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ju1_aVj2c-Rlf3XgC6OzcmezhwU.roa
File: ju1_aVj2c-Rlf3XgC6OzcmezhwU.roa (raw, json)
Hash identifier: 6EKiB7o504jAaIMVE3AXjR2lsCeV5SZ5PbA+24UT9WY=
Subject key identifier: 8E:ED:7F:69:58:F6:73:E4:65:7F:75:E0:0B:A3:B3:72:67:B3:87:05
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019271A370A6B3195DCE89D8C45BD5E612BA
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ju1_aVj2c-Rlf3XgC6OzcmezhwU.roa
Signing time: Wed 09 Oct 2024 14:16:29 +0000
ROA not before: Wed 09 Oct 2024 14:16:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 46.38.146.0/24 maxlen: 24
109.94.165.0/24 maxlen: 24
185.29.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 14:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:71:a3:70:a6:b3:19:5d:ce:89:d8:c4:5b:d5:e6:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Oct 9 14:16:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8eed7f6958f673e4657f75e00ba3b37267b38705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:06:17:f5:86:9a:9c:dd:48:78:4c:5b:f1:
97:97:d4:bc:db:5a:ed:ac:f2:67:48:f6:95:87:86:
c2:b1:2d:f8:db:f2:13:ec:41:0c:73:43:3b:09:64:
41:11:ae:42:b7:0b:a7:0d:52:19:3d:98:9a:86:17:
7b:c8:cb:db:cd:e9:7d:4b:e8:59:c6:91:e4:f3:c4:
c5:63:06:a8:26:6a:28:69:12:5b:2f:f3:d3:04:7c:
b1:ac:01:9e:81:d9:c1:e6:51:5a:af:36:57:ca:e6:
2d:d9:26:d3:a8:29:de:a9:c0:66:cb:7c:61:b1:0e:
b2:cd:88:d0:68:3b:f4:58:a1:39:b3:66:56:20:7b:
81:20:e5:1b:91:c1:6f:07:aa:85:ae:1f:59:4b:53:
40:69:db:6c:ea:43:ac:b1:5f:78:d3:dd:02:3a:16:
1e:ee:17:4a:fb:49:1e:72:42:49:45:5d:a6:fb:42:
b9:80:6c:c6:0d:b0:b7:9e:bc:34:e3:4c:00:5b:5f:
df:28:66:da:b5:8b:50:67:c1:30:34:2d:12:79:8b:
e6:49:e8:31:02:5e:63:be:aa:0e:df:02:c3:5a:ca:
a3:1e:91:9d:14:a1:0b:7a:bf:89:fa:14:c9:f9:c7:
4e:67:4a:92:a2:f7:5c:8d:1f:85:e7:dc:28:c3:8f:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:ED:7F:69:58:F6:73:E4:65:7F:75:E0:0B:A3:B3:72:67:B3:87:05
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ju1_aVj2c-Rlf3XgC6OzcmezhwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.146.0/24
109.94.165.0/24
185.29.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a8:ca:db:a4:ed:28:5d:e4:ab:07:a8:53:cf:b4:7c:a3:36:
6a:b4:b4:c2:65:9f:98:99:ac:cd:44:4d:1e:62:26:61:76:95:
e7:8f:b7:41:1c:e1:fd:45:e1:c4:f0:3e:1e:da:57:5c:08:a3:
34:ca:2c:bc:77:e6:f9:54:02:81:9f:82:4b:7b:e9:0e:d8:c3:
86:7f:b9:5e:bd:b9:0e:fa:83:8a:e7:c8:26:a9:a7:c3:d2:6e:
43:23:65:f6:8e:87:cd:11:ac:27:1d:01:c6:c6:c4:78:bc:2e:
e9:74:a9:7f:b3:4d:6e:55:97:3d:0e:da:8f:71:c5:d1:ab:c3:
23:8f:69:b6:15:85:18:44:b1:cd:34:d1:9b:ad:d5:ff:96:13:
e8:f0:5d:9b:6b:cf:d6:96:f7:71:06:4b:60:f6:48:aa:f9:7b:
d3:45:84:ad:09:ca:77:4e:65:34:dd:f2:02:0f:05:15:0d:62:
4c:d0:1a:05:14:6b:44:9e:a9:15:b5:3c:89:bb:6b:4c:19:48:
53:95:81:0a:d4:66:ee:2d:49:f6:db:ae:65:ba:f7:a3:76:b5:
46:85:b8:a8:91:24:bb:00:e9:a0:40:0e:cc:6a:59:26:7f:17:
0d:56:59:9d:73:a7:7d:92:fd:c5:93:54:ba:ce:02:2e:c3:9c:
aa:2e:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 19:19:41 2024 by rpki-client on console-ams.rpki-client.org